By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Bot detection in AWS WAF ACL question

0

I'm using AWS WAF ACL without Bot Control. Into my Traffic Overview dashboard I see "10% of bots" metric. My question: It doesn't mean that this traffic is blocked, as far as I see zero blocked requests in dashboard? Enter image description here

Thanks, Vitaly

Topics
Security, Identity, & Compliance
Tags
AWS WAF
Language
English
rePost-User-5800337
asked 4 months ago265 views
1 Answer
1
Accepted Answer

Hello.

It will not be blocked unless you include a blocking action in the AWS WAF rules.
What you're looking at are free metrics.
This is what is used for counting even if you haven't added any Bot Control rules.
https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html

Free bot visibility metrics and dimensions
When you don't use Bot Control in your web ACL, AWS WAF applies the Bot Control managed rule group to a sampling of your web requests, at no additional cost. This can provide an idea of the bot traffic that is coming to your protected resources. For information about Bot Control, see AWS WAF Bot Control rule group.

profile picture
EXPERT
Riku_Kobayashi
answered 4 months ago
profile picture
EXPERT
MaxCloud
reviewed 4 months ago
profile picture
EXPERT
Gary Mclean
reviewed 4 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content